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Amendments to the Claims : 

1. (Currently Amended) A system for authenticating a client A n apparatus 
comprising: 

an authentieator capable of sending a processor configured to send , to the-aclient, a set of 
a plurality of labels identifying a plurality of elements of an authentication matrix, the 
authentication matrix including a plurality of elements organized in one or more columns and 
rows , each element capable of being identified by a label that identifies the column and row of 
the respective element, the set of labels being unknown at the client until the set of labels is sent 
thereto , wherein the authentieator p rocessor is capable of receiving configured to receive a 
passcode from the client formulated based upon the elements identified by the received set of 
labels, and wherein the authentieator processor is capable of authenticating c onfigured to 
authenticate t he client based upon the formulated passcode. 

2. (Currently Amended) A system An apparatus according to Claim 1, wherein the 
authentieator processor is capable of sending configured to send a set of labels, receiving a 
formulated passcode and authenticating the client a plurality of times, and wherein the 
authentieator processor is capable of sending configured to send each set of labels such that the 
sent set of labels differs from each previously sent set of labels. 

3. (Currently Amended) A syst e m A n apparatus according to Claim 1, wherein the 
authentieator processor is capable of communicating with a passcode generator, wherein the 
passcode generator is capable of generating configured to generate a passcode based upon 
elements selected from the authentication matrix, wherein the authentieator p rocessor is capable 
of sending configured to send a set of labels identifying the selected elements, and wherein the 
authentieator processor is capable of authenticating configured to authenticate the client further 
based upon the generated passcode. 
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4. (Currently Amended) A system An apparatus according to Claim 3, wherein the 
authenticator includes a database capable of storing an authentication matrix, w herein the 
authenticator p rocessor is ■ capable of providing configured to provide, to the client, an 
authentication matrix to the client stored in a database , wherein the passcode generator processor 
is capable of generating configured to generate a passcode based upon elements selected from 
the authentication matrix stored in the database, and wherein the auth e nticator p rocessor is 
capable of receiving - configured to receive a passcode formulated based upon elements of the 
authentication matrix provided to the client corresponding to the elements selected from the 
authentication matrix stored in the database. 



5. (Currently Amended) A system An apparatus according to Claim 4, wherein the 
database of the authenticator is capable of storing configured to store a plurality of authentication 
matrices, each authentication matrix associated with a different client, wherein the auth e nticator 
processor is capable of providing configured to provide , to the client being authenticated, an 
authentication matrix associated with the respective client, and wherein the p assco d e generator 
processor is capable of generating configured to generate a passcode based upon elements 
selected from the authentication matrix stored in the database and associated with the respective 
client. 



6. (Currently Amended) A system An apparatus according to Claim 5, wherein the 
authenticator processor is capabl e of r e c e iving configured to receive at least one piece of 
identifying information associated with the client being authenticated, and thereafter identifying, 
from the plurality of authentication matrices stored in the database, the authentication matrix 
associated with the client being authenticated based upon the at least one piece of identifying 
information, and wherein the paascodo generator processor is capable of generating c onfigured to 
generate a passcode based upon elements selected from the identified authentication matrix. 



7. (Currently Amended) A system An apparatus according to Claim 3, wherein the 
r -processor is capable o f generating configured to generate a passcode further 
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based upon a personal identification number (PIN) associated with the client, and wherein the 
authenticator processor is capable of receiving configured to recei ve a passcode formulated 
further based upon the PIN. 

8. (Currently Amended) A system An apparatus according to Claim 7, wherein the 
passcode generator p rocessor is capable of generating configured to generate a passcode 
including elements selected from the authentication matrix and the PIN in a variable position 
with respect to the selected elements, wherein the authenticator processor is capable of receiving 
configured to receive a passcode formulated to include the identified elements and the PIN in the 
variable position with respect to the identified elements, and wherein the authenticator processor 
is capable of authenticating configured to authenticate the client by identifying a match between 
the generated passcode and the formulated passcode. 

9. (Currently Amended) A system An apparatus comprising: 

a client, capable of receiving processor configured to receive a set of a plurality of labels 
identifying a plurality of elements of an authentication matrix, the authentication matrix 
including a plurality of elements organized in one or more columns and rows , each element 
capable of being identified by a label that identifies the column and row of the respective 
element, the set of labels being unknown at the apparatus until the set of labels is received by the 
processor , wherein the client -processor is capable of formulating a configured to formulate or 
receive a formulated p asscode based upon the elements identified by the received set of labels 
such that t o thereby enable authentication of t he client is capable of being authenticated 
apparatus or a user of the apparatus b ased upon the formulated passcode. 

1 0. (Currently Amended) A system An apparatus according to Claim 9, wherein the 
eMeat -processor is capable of receiving configured to receive the set of labels and formulating a 
formulate or receive a formulated p asscode a plurality of times such that the client is capable of 

3 -to thereby enable authenti cation of the apparatus or user a plurality of times, 
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previously received by the-ehen t processor . 

1 1 . (Currently Amended) A system A n apparatus according to Claim 9, wherein the 
eMent- processor is capable of r e ceiving configured to receive a set of labels identifying elements 
selected from the authentication matrix during generation of a passcode, and wherein the client 
processor is capable of formulating the configured to formulate or receive the formulated 
passcode such that the client is capable of being authenticated to thereby enable authentication of 
the apparatus or user further based upon the generated passcode. 

1 2. (Currently Amended) A system An apparatus according to Claim 1 1 , wherein the 



authentication matrix, wherein the cheat- processor is capabl e o f r e c e iving c onfigured to receive a 
set of labels identifying elements selected from the authentication matrix stored by the 
authenticator, and wherein the cheat -processor is capable of formulating a configured to 
formulate or receive a formulated passcode based upon elements of the authentication matrix 
provided to the cheat -apparatus or user corresponding to the elements selected from the 
authentication matrix stored by the authenticator. 

13. (Currently Amended) A syst e m A n apparatus according to Claim 12, wherein the 
client is capable of being provided with an authentication matrix configured for provision to the 
apparatus or user is associated with the respective cheat- apparatus or user, the respective 



authentication matrix being configured for provision from an authenticator capable of storing 

configured to store a plurality of authentication matrices, each authentication matrix associated 
with a different-ehen t apparatus or user , and wherein the etieat -processor is capable of receiving 
configured to receive a set of labels identifying elements selected from the authentication matrix 
stored by the authenticator and associated with the respective-cheat apparatus or user . 



the apparatus or user from an authenticator 
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14. (Currently Amended) A system An apparatus according to Claim 13, wherein the 
client- processor is capable of sending configured to send the authenticator at least one piece of 
identifying information associated with the respective client such that apparatus or user to 
thereby enable the authenticato r in capable of identifyin g to identify , from the plurality of 
authentication matrices, the authentication matrix associated with the respective eMent -apparatus 
or user b ased upon the at least one piece of identifying information, and wherein the client 
processor is capable of receiving configured to receive a set of labels identifying elements 
selected from the identified authentication matrix. 

15. (Currently Amended) A system An apparatus according to Claim 1 1 , wherein the 
client- processor is capable of receiving configured to receive a set of labels identifying elements 
selected from the authentication matrix during generation of a passcode based upon a personal 
identification number (PIN) associated with the-clien t processor , and wherein the client 
processor is capable of formulating a configured to formulate or receive a formulated p asscode 
further based upon the PIN. 

1 6. (Currently Amended) A system An apparatus according to Claim 1 5, wherein the 
client -processor is capable of receiving configured to receive a set of labels identifying elements 
selected from the authentication matrix during generation of a passcode including elements 
selected from the authentication matrix and the PIN in a variable position with respect to the 
selected elements, wherein the eHen^ processor is capable of formulating a configured to 
formulate or receive a formulated p asscode including the identified elements and the PIN in the 
variable position with respect to the identified elements such that the client is capable of being 
authenticated to thereby enable authentication of the apparatus or user b y identifying a match 
between the generated passcode and the formulated passcode. 

1 7. (Currently Amended) A method of authenticating a client comprising: 
receiving sending, to a client, a set of a plurality of labels identifying a plurality of 

elements of an authentication matrix, the authentication matrix including a plurality of elements 
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organized in one or more columns and rows , each element capable of being identified by a label 
that identifies the column and row of the respective element, the set of labels being unknown at 
the client until the set of labels is sent thereto ; 

formulating receiving a passcode formulated b ased upon the elements identified by the 
received set of labels; and 

authenticating the client based upon the formulated passcode. 

18. (Currently Amended) A method according to Claim 1 7, wherein receiving 
sending a set of labels, formulating receiving a passcode and authenticating the client occur a 
plurality of times, and wherein each received sent set of labels differs from each previously 
received sent set of labels. 

19. (Currently Amended) A method according to Claim 17 further comprising: 
generating a passcode based upon elements selected from the authentication matrix, 
wherein receiving sending a set of labels comprises r e ceiving sending a set of labels 

identifying the selected elements, and 

wherein authenticating the client comprises authenticating the client further based upon 
the generated passcode. 

20. (Currently Amended) A method according to Claim 1 9 further comprising: 
providing an authentication matrix to an authenticator, and providing an authentication 

matrix to the client, 

wherein generating a passcode comprises generating a passcode based upon elements 
selected from the authentication matrix provided to the authenticator, and 

wherein formulating r eceiving a passcode comprises formulating receiving a passcode 
formulated based upon elements of the authentication matrix provided to the client 
corresponding to the elements selected from the authentication matrix provided to the 
authenticator. 
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21 . (Previously Presented) A method according to Claim 20, wherein providing an 
authentication matrix to an authenticator comprises providing a plurality of authentication 
matrices to an authenticator, each authentication matrix associated with a different client, 
wherein providing an authentication matrix to the client comprises providing, to the client being 
authenticated, an authentication matrix associated with the respective client, and 

wherein generating a passcode comprises generating a passcode based upon elements 
selected from the authentication matrix provided to the authenticator and associated with the 
respective client. 

22. (Previously Presented) A method according to Claim 21 further comprising: 
receiving at least one piece of identifying information associated with the client being 

authenticated; and 

identifying, from the plurality of authentication matrices, the authentication matrix 
associated with the client being authenticated based upon the at least one piece of identifying 
information, 

wherein generating a passcode comprises generating a passcode based upon elements 
selected from the identified authentication matrix. 



23. (Currently Amended) A method according to Claim 19, wherein generating a 
passcode comprises generating a passcode further based upon a personal identification number 
(PIN) associated with the client, and wherein formulating receiving a passcode comprises 
formulating receiving a passcode formulated further based upon the PIN. 



24. (Currently Amended) A method according to Claim 23, wherein generating a 
passcode comprises generating a passcode including elements selected from the authentication 
matrix and the PIN in a variable position with respect to the selected elements, wherein 
formulating r eceiving a passcode comprises formulating receiving a passcode including 
formulated to include t he identified elements and the PIN in the variable position with respect to 
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the identified elements, and wherein authenticating the client comprises identifying a match 
between the generated passcode and the formulated passcode. 

25. (Currently Amended) A computer program product for authenticating a client, 
the computer program product comprising at least one computer-readable storage medium 
having computer-readable program code portions stored therein, the computer-readable program 
code portions comprising: 

a first executable portion for receiving configured to send, to a client, a set of a plurality 
of labels identifying a plurality of elements of an authentication matrix, the authentication matrix 
including a plurality of elements organized in one or more columns and rows , each element 
capable of being identified by a label that identifies the column and row of the respective 
element, the set of labels being unknown at the client until the set of labels is sent thereto ; 

a second executable portion for formulating configured to receive a passcode formulated 
based upon the elements identified by the received set of labels; and 

a third executable portion for authenticating configured to authenticate the client based 
upon the formulated passcode. 

26. (Currently Amended) A computer program product according to Claim 25, 
wherein the first, second and third executable portions are adapted configured to reeetve -send a 
set of labels, formulate receive a passcode and authenticate the client, respectively, a plurality of 
times, and wherein each set of labels rec e ived sent by the first executable portion differs from 
each set of labels previously rec e ived sent by the first executable portion. 

27. (Currently Amended) A computer program product according to Claim 25 further 
comprising: 

a fourth executable portion for generating configured to generate a passcode based upon 
elements selected from the authentication matrix, 

wherein the first executable portion is adapted configured t o feeeive -send a set of labels 
identifying the selected elements, and 
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wherein the third executable portion is adapted confi gured t o authenticate the client 
further based upon the generated passcode. 

28. (Currently Amended) A computer program product according to Claim 27 further 
comprising: 

a fifth executable portion for providing configured to provide an authentication matrix to 
an authenticator, and providing provide an authentication matrix to the client, 

wherein the fourth executable portion is adapted configured t o generate a passcode based 
upon elements selected from the authentication matrix provided to the authenticator, and 

wherein the second executable portion is adapted configured t o formulate receive a 
passcode formulated based upon elements of the authentication matrix provided to the client 
corresponding to the elements selected from the authentication matrix provided to the 
authenticator. 

29. (Currently Amended) A computer program product according to Claim 28, 
wherein the fifth executable portion is a da p te d configured to provide a plurality of authentication 
matrices to the authenticator, each authentication matrix associated with a different client, 
wherein the fifth executable portion is also adapted- configured to provide, to the client being 
authenticated, an authentication matrix associated with the respective client, and 

wherein the fourth executable portion is adapted c onfigured to generate a passcode based 
upon elements selected from the authentication matrix provided to the authenticator and 
associated with the respective client. 

30. (Currently Amended) A computer program product according to Claim 29 further 
comprising: 

a sixth executable portion for receiving configured to receive at least one piece of 
identifying information associated with the client being authenticated; and 
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a seventh executable portion for identifying configured to identify , from the plurality of 
authentication matrices, the authentication matrix associated with the client being authenticated 
based upon the at least one piece of identifying information, 

wherein the fourth executable portion is adapted configured to generate a passcode based 
upon elements selected from the identified authentication matrix. 

3 1 . (Currently Amended) A computer program product according to Claim 27, 
wherein the fourth executable portion is adapted configured to generate a passcode further based 
upon a personal identification number (PIN) associated with the client, and wherein the second 
executable portion is adapted configured to formulate receive a passcode formulated further 
based upon the PIN. 

32. (Currently Amended) A computer program product according to Claim 3 1 , 
wherein the fourth executable portion is adapted to generate a passcode including elements 
selected from the authentication matrix and the PIN in a variable position with respect to the 
selected elements, wherein the second executable portion is adapted configured to formulate 
receive a passcode including formulated to include t he identified elements and the PIN in the 
variable position with respect to the identified elements, and wherein the third executable portion 
is adapted configured t o authenticate the client by identifying a match between the generated 
passcode and the formulated passcode. 

33. (Currently Amended) A syst e m An apparatus comprising: 



of labels identifying a plurality of elements of a matrix, the matrix including a plurality of 
elements organized in one or more columns and rows , each element capable of being identified 
by a label that identifies the column and row of the respective element, the set of labels being 
unknown at the client until the set of labels is sent thereto , and wherein the entity -processor is 




processor configured to send , to a client, a set of a plurality 




a response from the client formulated based upon the 



elements identified by the received set of labels. 
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34. (Currently Amended) A system An apparatus according to Claim 33, wherein the 
entity -processor is capable of sending configured to send a set of labels, and receiving receive a 
formulated response a plurality of times, and wherein the entity- processor is capable of sending 
configured to send each set of labels such that the sent set of labels differs from each previously 
sent set of labels. 

35. (Currently Amended) A system An apparatus according to Claim 33, wherein the 
entity comprises an authenticator and the matrix comprises an authentication matrix, wherein the 
authenticator processor is capable of receiving configured to receive a response comprising a 
formulated p asscode, and wherein the authenticator processor is capable of authenticating 
configured to authenticate t he client based upon the formulated passcode. 

36. (Currently Amended) A syst e m An apparatus according to Claim 35, wherein the 
authenticator processor is capable of communicating with a passcode generator, wherein the 
pnnr . nnHo ytinmtnr in mpnhb. nf generating configured to generate a passcode based upon 
elements selected from the authentication matrix, wherein the authenticator processor is capable 
of sending configured to send a set of labels identifying the selected elements, and wherein the 
authenticator processor is cnpnble of authenticating configured to authenticate the client further 
based upon the generated passcode. 

37. (Currently Amended) A system A n apparatus according to Claim 36, wher e in the 
auth e nticator includes a database capable of storing an authentication matrix, wherein the 
authenticator processor is capable of providing , to the client, an authentication matrix to the 
etien t stored in a database , wherein the panscodo generator processor is capable of generating 
configured to generate a passcode based upon elements selected from the authentication matrix 
stored in the database, and wherein the authenticator processor is capable of receiving confi g ured 
to receive a passcode formulated based upon elements of the authentication matrix provided to 
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the client corresponding to the elements selected from the authentication matrix stored in the 



38. (Currently Amended) A system A n apparatus according to Claim 37, wherein the 
database of trie mithenticator is capable of storing is configured to store a plurality of 
authentication matrices, each authentication matrix associated with a different client, wherein the 
authenticator processor is capable of providin g configured to provide , to the client being 
authenticated, an authentication matrix associated with the respective client, and wherein the 
passcode generator processor is capable of generating configured to generate a passcode based 
upon elements selected from the authentication matrix stored in the database and associated with 
the respective client. 



39. (Currently Amended) A syst e m An apparatus according to Claim 38, wherein the 
authenticator processor is capable of rec e iving configured to receive at least one piece of 
identifying information associated with the client being authenticated, and thereafter identifying 
identify , from the plurality of authentication matrices stored in the database, the authentication 
matrix associated with the client being authenticated based upon the at least one piece of 
identifying information, and wherein the passeede generator processor is capable ofgener 
configured to generate a passcode based upon elements selected from the identified 
authentication matrix. 



40. (Currently Amended) A system An apparatus according to Claim 36, wherein the 
passcode generator processor is capable of generating configured to generate a passcode further 
based upon a personal identification number (PIN) associated with the client, and wherein the 
authenticator processor is capable of receiving configured to recei ve a passcode formulated 
further based upon the PIN. 



4 1 . (Currently Amended) A system An apparatus according to Claim 40, wherein the 
r- processor is capabl e of generating configured to generate a passcode 
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including elements selected from the authentication matrix and the PIN in a variable position 
with respect to the selected elements, wherein the authenticator processor is capable of receiving 
configured to receive a passcode formulated to include the identified elements and the PIN in the 
variable position with respect to the identified elements, and wherein the authenticator processor 
is capable of authenticating configured to authenticate t he client by identifying a match between 
the generated passcode and the formulated passcode. 

42. (Currently Amended) A system A n apparatus comprising: 

a client capable of receiving processor configured to receive a set of a plurality of labels 
identifying a plurality of elements of a matrix, the matrix including a plurality of elements 
organized in one or more columns and rows , each element capable of being identified by a label 
that identifies the column and row of the respective element, the set of labels being unknown at 
the apparatus until the set of labels is received by the processor, wherein the client is capable of 
formulating a configured to formulate or receive a formulated response based upon the elements 
identified by the received set of labels. 

43. (Currently Amended) A system An apparatus according to Claim 42, wherein the 
client processor is capable of receiving configured to receive t he set of labels and formulating a 
response a plurality of times, and wherein each set of labels received by the etieat -processor 
differs from each set of labels previously received by the-ehen t processor . 

44. (Currently Amended) A system A n apparatus according to Claim 42, wherein the 
client- processor is capable of receiving configured to receive t he set of labels identifying 
elements of an authentication matrix, and wherein the etieat- processor is capable of formulating 
a configured to formulate or receive a formulated response comprising a passcode such t ha t the 
client is capable of being authenticated to thereby enable authentication of the apparatus or a user 
of the apparatus based upon the formulated passcode. 
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45. (Currently Amended) A system A n apparatus according to Claim-42 - 42, wherein 
the cheat- processor is capable of receiving configured to receive a set of labels identifying 
elements selected from the authentication matrix during generation of a passcode, and wherein 
the client -processor is capable of formulating the configured to formulate or receive the 
formulated p asscode such that tho client is capable of being authenticated t o thereby enable 
authentication of the apparatus or user further based upon the generated passcode. 

46. (Currently Amended) A system A n apparatus according to Claim 45, wherein the 
client is capable of being provided with an authentication matrix is configured for provision to 
the apparatus or user from an authenticator capable of storing configured to store an 
authentication matrix, wherein the cheat -processor is capable of receiving configured to receive a 
set of labels identifying elements selected from the authentication matrix stored by the 
authenticator, and wherein the cheat- processor is cap a b l e of formulating a confi g ured to 
formulate or receive a formulated p asscode based upon elements of the authentication matrix 
provided to the eheat- apparatus or user corresponding to the elements selected from the 
authentication matrix stored by the authenticator. 

47. (Currently Amended) A system An apparatus according to Claim 46, wherein the 
c li e nt is capa b l e o f b e i ng p rovided with an -authenticati"" matrix configured for provision to the 
apparatus or user is associated with the respective etien^ apparatus or user, the respective 
authentication matrix being configured for provision from an authenticator capable of s toring 
configared to store a plurality of authentication matrices, each authentication matrix associated 
with a different-cheat apparatus or user , and wherein the etieat -processor is capable of receiving 
configured to receive a set of labels identifying elements selected from the authentication matrix 
stored by the authenticator and associated with the respective-cheat apparatus or user. 

48. (Currently Amended) A system An apparatus according to Claim 47, wherein the 
cheat- processor is r.npn.h1o of sending configured to send t he authenticator at least one piece of 
identifying information associated with the respective client such that apparatus or user to 
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thereby enable t he authenticator is capa ble of identifying to identify , from the plurality of 
authentication matrices, the authentication matrix associated with the respective client -apparatus 
or user b ased upon the at least one piece of identifying information, and wherein the client 
processor is capable of receiving configured to receive a set of labels identifying elements 
selected from the identified authentication matrix. 

49. (Currently Amended) A system A n apparatus according to Claim 45, wherein the 
eMent -processor is capable of receiving configured to receive a set of labels identifying elements 
selected from the authentication matrix during generation of a passcode based upon a personal 
identification number (PIN) associated with the-e4iee t apparatus or user , and wherein the client 
processor is capable of formulating a confi gured to formulate or recei ve a formulated p asscode 
further based upon the PIN. 

50. (Currently Amended) A syst e m An apparatus according to Claim 49, wherein the 
eMeat -processor is capable of receiving configured to receive a set of labels identifying elements 
selected from the authentication matrix during generation of a passcode including elements 
selected from the authentication matrix and the PIN in a variable position with respect to the 
selected elements, wherein the client -processor is capable of formulating a confi gured to 
formulate or receive a formulated p asscode including the identified elements and the PIN in the 
variable position with respect to the identified elements such that the client is capable of being 
authenticated to thereby enable authentication of the apparatus or user by identifying a match 
between the generated passcode and the formulated passcode. 

51. (Currently Amended) A method comprising: 

recei ving sending, to a client, a set of a plurality of labels identifying a plurality of 
elements of a matrix, the matrix including a plurality of elements organized in one or more 
columns and rows , each element capable of being identified by a label that identifies the column 
and row of the respective element, the set of labels being unknown at the client until the set of 
labels is sent thereto ; and 
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formulating receiving a response formulated b ased upon the elements identified by the 
received set of labels. 

52. (Currently Amended) A method according to Claim 5 1 , wherein receiving 
sending a set of labels and formulating receiving a response occur a plurality of times, and 
wherein each received set of labels differs from each previously received set of labels. 

53 . (Currently Amended) A method according to Claim 5 1 , wherein receiving 
sending a set of labels comprises recei ving sending a set of labels identifying elements of an 
authentication matrix, wherein formulating receiving a response comprises formulating receiving 
a formulated passcode, and wherein the method further comprises: 

authenticating the client based upon the formulated passcode. 

54. (Currently Amended) A method according to Claim 53 further comprising: 
generating a passcode based upon elements selected from the authentication matrix, 
wherein receiving sending a set of labels comprises receiving a set of labels identifying 

the selected elements, and 

wherein authenticating the client comprises authenticating the client further based upon 
the generated passcode. 

55. (Currently Amended) A method according to Claim 54 further comprising: 
providing an authentication matrix to an authenticator, and providing an authentication 

matrix to the client, 

wherein generating a passcode comprises generating a passcode based upon elements 
selected from the authentication matrix provided to the authenticator, and 

wherein formulating receiving a passcode comprises formulating r eceiving a passcode 
formulated based upon elements of the authentication matrix provided to the client 
corresponding to the elements selected from the authentication matrix provided to the 
authenticator. 
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56. (Previously Presented) A method according to Claim 55, wherein providing an 
authentication matrix to an authenticator comprises providing a plurality of authentication 
matrices to an authenticator, each authentication matrix associated with a different client, 
wherein providing an authentication matrix to the client comprises providing, to the client being 
authenticated, an authentication matrix associated with the respective client, and 

wherein generating a passcode comprises generating a passcode based upon elements 
selected from the authentication matrix provided to the authenticator and associated with the 
respective client. 

57. (Previously Presented) A method according to Claim 56 further comprising: 
receiving at least one piece of identifying information associated with the client being 

authenticated; and 

identifying, from the plurality of authentication matrices, the authentication matrix 
associated with the client being authenticated based upon the at least one piece of identifying 
information, 

wherein generating a passcode comprises generating a passcode based upon elements 
selected from the identified authentication matrix. 



58. (Currently Amended) A method according to Claim 54, wherein generating a 
passcode comprises generating a passcode further based upon a personal identification number 
(PIN) associated with the client, and wherein formulating r eceiving a passcode comprises 
formulating r eceiving a passcode formulated further based upon the PIN. 

59. (Currently Amended) A method according to Claim 58, wherein generating a 
passcode comprises generating a passcode including elements selected from the authentication 
matrix and the PIN in a variable position with respect to the selected elements, wherein 
formulating receiving a passcode comprises formulating receiving a passcode including 
formulated to include the identified elements and the PPN in the variable position with respect to 
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the identified elements, and wherein authenticating the client comprises identifying a match 
between the generated passcode and the formulated passcode. 

60. (Currently Amended) A system An apparatus according to Claim 1, wherein the 
airthenticator is capable of s ending p rocessor is configured to send a set of labels to the client in 
response to the client effectuating logging in, logging in including prompting the client for at 
least one piece of identifying information, and receiving the at least one piece of identifying 
information from the client, the at least one piece of identifying information comprising a user 
name and a password associated with a client user. 

61 . (Currently Amended) A system An apparatus according to Claim 6, wherein the 
at least one piece of identifying information received by the au t henti c ator p rocessor is capable of 
identifying the client to an organization independent of the authentication matrix associated with 
the client. 

62. (Currently Amended) A system A n apparatus according to Claim 9, wherein the 
client m capable of receiving processor is configured to receive a set of labels in response to the 
etientr apparatus or user effectuating logging in, logging in including the etient-apparatus or user 
being prompted for at least one piece of identifying information, and sending the at least one 
piece of identifying information, the at least one piece of identifying information comprising a 
user name and a password associated with a cli e nt the user. 

63. (Currently Amended) A system A n apparatus according to Claim 14, wherein the 
at least one piece of identifying information sent by the eMent- processor is capable of identifying 
the elient -apparatus or user to an organization independent of the authentication matrix 
associated with the respective-elieHt apparatus or user . 

64. (Currently Amended) A method according to Claim 1 7, wherein receiving 
sending a set of labels comprises receiving sending a set of labels in response to effectuating 
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logging in, logging in including prompting the client for at least one piece of identifying 
information, and sending recei ving t he at least one piece of identifying information, the at least 
one piece of identifying information comprising a user name and a password associated with a 
client user. 

65. (Previously Presented) A method according to Claim 22, wherein receiving at 
least one piece of identifying information comprises receiving at least one piece of identifying 
information capable of identifying the client to an organization independent of the authentication 
matrix associated with the client. 

66. (Currently Amended) A computer program product according to Claim 25, 
wherein the first executable portion is adapted configured to feeeive -send a set of labels in 
response to effectuating logging in, logging in including prompting the client for at least one 
piece of identifying information, and sending receiving the at least one piece of identifying 
information, the at least one piece of identifying information comprising a user name and a 
password associated with a client user. 

67. (Previously Presented) A computer program product according to Claim 30, 
wherein the at least one piece of identifying information received by the sixth executable portion 
is capable of identifying the client to an organization independent of the authentication matrix 
associated with the client. 

68. (Currently Amended) A system An apparatus according to Claim 33, wherein the 
entity is capable of sending processor is configured to send a set of labels to the client in 
response to effectuating logging in, logging in including prompting the client for at least one 
piece of identifying information, and receiving the at least one piece of identifying information, 
the at least one piece of identifying information comprising a user name and a password 
associated with a client user. 
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69. (Currently Amended) A system An apparatus according to Claim 39, wherein the 
at least one piece of identifying information received by the authenticator processor is capable of 
identifying the client to an organization independent of the authentication matrix associated with 
the client. 

70. (Currently Amended) A system An apparatus according to Claim 42, wherein the 
client is capable of receiving processor is configured to receive a set of labels in response to 
effectuating logging in, logging in including the client -apparatus or user b eing prompted for at 
least one piece of identifying information, and sending the at least one piece of identifying 
information, the at least one piece of identifying information comprising a user name and a 
password associated wit h a client user the user . 

71 . (Currently Amended) A syst e m An apparatus according to Claim 48, wherein the 
at least one piece of identifying information sent by the etieat -processor is capable of identifying 
the client- apparatus or user to an organization independent of the authentication matrix 
associated with the respective-eHent apparatus or user . 

72. (Currently Amended) A method according to Claim 5 1 , wherein receiving 
sending a set of labels comprises receiving sending a set of labels in response to effectuating 
logging in, logging in including prompting the client for at least one piece of identifying 
information, and s e nding receiving t he at least one piece of identifying information, the at least 
one piece of identifying information comprising a user name and a password associated with a 
client user. 

73. (Previously Presented) A method according to Claim 57, wherein receiving at 
least one piece of identifying information comprises receiving at least one piece of identifying 
information capable of identifying the client to an organization independent of the authentication 
matrix associated with the client. 
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74. (Currently Amended) A system for authenticating 



-An apparatus 



comprising: 




to prompt a user for at least one 



piece of identifying information associated with the user, the user being prompted during 
effectuation of logging in, 



identifying information in response to prompting the user, wherein the entity- processor r eceiving 
of the identifying information invokes an authentication procedure, the authentication procedure 
comprising: 

selecting a set of labels identifying elements of an authentication matrix, wherein 
the authentication matrix includes a plurality of elements thaHffe- organized in one or 
more columns and rows, each element capable of being identified by a label that 
identifies the column and row of the respective element ; 

providing the selected set of labels to the user, the set of selected labels being 
unknown to the user until the set is provided; 

receiving a passcode from the user in response to providing the set of labels, the 
passcode having been formulated based upon the elements identified by the provided set 
of labels; and 

authenticating the user based upon the received passcode. 

75. (Currently Amended) A syst e m An apparatus according to Claim 74, wherein the 
entity -processor is capable of prompting configured to prompt the user and receiving r eceive the 
identifying information for each of a plurality of instances of logging in, and wherein the entity 
processor r eceiving of the identifying information for each instance invokes the authentication 
procedure such that the set of labels provided for the respective instance differs between the set 
of labels provided for each previous instance. 



wherein the 




- processor is configured to receive the 
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76. (Currently Amended) A system An apparatus according to Claim 75, wherein the 
entity -processor receiving of the identifying information for each instance invokes the 
authentication procedure such that the received passcode is unique to the respective instance. 

77. (Currently Amended) A syst e m An apparatus according to Claim 74, wherein the 
entity- processor is capabl e of receiving configured to receive at least one piece of identifying 
information such that the authentication procedure further comprises: 

identifying, from the plurality of authentication matrices, the authentication matrix 
associated with the client being authenticated based upon the at least one piece of identifying 
information, the selected set of labels identifying elements of the identified authentication 
matrix. 

78. (Currently Amended) A syst e m An apparatus according to Claim 77, wherein the 
at least one piece of identifying information received by the entity -processor is capable of 
identifying the client to an organization independent of the authentication matrix associated with 
the client. 

79. (Currently Amended) A system An apparatus according to Claim 74, wherein the 
entity -processor is capable of receiving configured to receive at least one piece of identifying 
information such that the authentication procedure includes receiving a passcode having been 
formulated further based upon a personal identification number (PIN) associated with the client. 

80. (Currently Amended) A system An apparatus according to Claim 79, wherein the 
entity -processor is capable of receiving configured to receive at least one piece of identifying 
information such that the authentication procedure includes receiving a passcode having been 
formulated including at least one element selected from the authentication matrix and the PIN in 
a predefined position with respect to the selected at least one element. 
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8 1 . (Currently Amended) A system An apparatus according to Claim 74, wherein the 
identifying information received by the entity -processor comprises a user name and a password 
associated with the user. 

82. (Previously Presented) A method for authenticating a user comprising: 
prompting a user for at least one piece of identifying information associated with the 

user, the user being prompted during effectuation of logging in; and 

receiving the identifying information in response to prompting the user, wherein 
receiving of the identifying information invokes an authentication procedure, the authentication 
procedure comprising: 

selecting a set of labels identifying elements of an authentication matrix, wherein 
the authentication matrix includes a plurality of elements that-are- organized in one or 
more columns and rows, each element capable of being identified by a label that 
identifies the column and row of the respective element ; 

providing the selected set of labels to the user, the set of selected labels being 
unknown to the user until the set is provided; 

receiving a passcode from the user in response to providing the set of labels, the 
passcode having been formulated based upon the elements identified by the provided set 
of labels; and 

authenticating the user based upon the received passcode. 

83 . (Previously Presented) A method according to Claim 82, wherein prompting the 
user and receiving the identifying information occur for each of a plurality of instances of 
logging in, and wherein the receiving of the identifying information for each instance invokes the 
authentication procedure such that the set of labels provided for the respective instance differs 
between the set of labels provided for each previous instance. 
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84. (Previously Presented) A method according to Claim 83, wherein the receiving of 
the identifying information for each instance invokes the authentication procedure such that the 
received passcode is unique to the respective instance. 

85. (Previously Presented) A method according to Claim 82, wherein receiving at 
least one piece of identifying information comprises receiving at least one piece of identifying 
information such that the authentication procedure further comprises: 

identifying, from the plurality of authentication matrices, the authentication matrix 
associated with the client being authenticated based upon the at least one piece of identifying 
information, the selected set of labels identifying elements of the identified authentication 
matrix. 

86. (Previously Presented) A method according to Claim 85, wherein the received at 
least one piece of identifying information is capable of identifying the client to an organization 
independent of the authentication matrix associated with the client. 

87. (Previously Presented) A method according to Claim 82, wherein receiving at 
least one piece of identifying information comprises receiving at least one piece of identifying 
information at least one piece of identifying information such that the authentication procedure 
includes receiving a passcode having been formulated further based upon a personal 
identification number (PIN) associated with the client. 

88. (Previously Presented) A method according to Claim 87, wherein receiving at 
least one piece of identifying information comprises receiving at least one piece of identifying 
information such that the authentication procedure includes receiving a passcode having been 
formulated including at least one element selected from the authentication matrix and the PIN in 
a predefined position with respect to the selected at least one element. 
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89. (Previously Presented) A method according to Claim 82, wherein prompting a 
user comprises prompting a user for identifying information comprising a user name and a 
password associated with the user. 

90. (Currently Amended) A computer program product for authenticating a user, the 
computer program product comprising at least one computer-readable storage medium having 
computer-readable program code portions stored therein, the computer-readable program code 
portions comprising: 

a first executable portion for prompting configured to prompt a user for at least one piece 
of identifying information associated with the user, the user being prompted during effectuation 
of logging in; and 

a second executable portion for receiving c onfigured to receive the identifying 
information in response to prompting the user, wherein the second executable portion receiving 
of the identifying information invokes an authentication procedure, the authentication procedure 
comprising: 

selecting a set of labels identifying elements of an authentication matrix, wherein 
the authentication matrix includes a plurality of elements tha^aFe- organized in one or 
more columns and rows each element capable of being identified by a label that identifies 
the column and row of the respective element ; 

providing the selected set of labels to the user, the set of selected labels being 
unknown to the user until the set is provided; 

receiving a passcode from the user in response to providing the set of labels, the 
passcode having been formulated based upon the elements identified by the provided set 
of labels; and 

authenticating the user based upon the received passcode. 

91 . (Currently Amended) A computer program product according to Claim 90, 
wherein the first and second executable portions are adapted configured to prompt the user and 
receive the identifying information for each of a plurality of instances of logging in, and wherein 
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the second executable portion receiving of the identifying information for each instance invokes 
the authentication procedure such that the set of labels provided for the respective instance 
differs between the set of labels provided for each previous instance. 

92. (Previously Presented) A computer program product according to Claim 9 1 , 
wherein the second executable portion receiving of the identifying information for each instance 
invokes the authentication procedure such that the received passcode is unique to the respective 
instance. 

93 . (Currently Amended) A computer program product according to Claim 90, 
wherein the second executable portion is adapted configured t o receive at least one piece of 
identifying information such that the authentication procedure further comprises: 

identifying, from the plurality of authentication matrices, the authentication matrix 
associated with the client being authenticated based upon the at least one piece of identifying 
information, the selected set of labels identifying elements of the identified authentication 
matrix. 

94. (Previously Presented) A computer program product according to Claim 93, 
wherein the at least one piece of identifying information received by the second executable 
portion is capable of identifying the client to an organization independent of the authentication 
matrix associated with the client. 

95. (Currently Amended) A computer program product according to Claim 90, 
wherein the second executable portion is adapted- configured t o receive at least one piece of 
identifying information such that the authentication procedure includes receiving a passcode 
having been formulated further based upon a personal identification number (PIN) associated 
with the client. 
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96. (Currently Amended) A computer program product according to Claim 95, 
wherein the second executable portion is adapted c onfigured t o receive at least one piece of 
identifying information such that the authentication procedure includes receiving a passcode 
having been formulated including at least one element selected from the authentication matrix 
and the PIN in a predefined position with respect to the selected at least one element. 

97. (Currently Amended) A computer program product according to Claim 90, 
wherein the first executable portion is adapted configured t o prompt a user for identifying 
information comprising a user name and a password associated with the user. 
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